On Sun, Sep 29, 2013, Markus Moeller wrote:
>
> Hi Stephen,
>
> Thank you for the quick reply. Looking at 1.0.1e I see in the
> source of X509_STORE_add_crl
>
> if (X509_OBJECT_retrieve_match(ctx->objs, obj))
> {
> X509_OBJECT_free_contents(obj);
> OPENSSL_free(obj);
> X509err(X509_F_X509_STORE_ADD_CRL,X509_R_CERT_ALREADY_IN_HASH_TABLE);
> ret=0;
> }
> else sk_X509_OBJECT_push(ctx->objs, obj);
>
> which I interpret as the behaviour will still be the same as in 0.9.8x.
>
I suggest you try it. You should only get an error if you try to add the
*same* CRL more than once.
Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
